Re: brute force attacking the password - Mailing list pgsql-admin

From Wim Bertels
Subject Re: brute force attacking the password
Date
Msg-id 426503DA.8080609@khleuven.be
Whole thread Raw
In response to Re: brute force attacking the password  (Bruce Momjian <pgman@candle.pha.pa.us>)
List pgsql-admin

Bruce Momjian schreef:

>Wim Bertels wrote:
>
>
>>LS,
>>
>>is there a way of securing the postgresql-server against brute force
>>password cracking ?
>>iow: is there a way of setting eg a maximum number of login attempts, or
>>using a time-out or ..?
>>
>>+ securing on server level
>>
>>
>
>No, there is not.  Does anyone want to suggest a possible implementation
>for the TODO list?
>
>
evident remarks:
http://www.woodmann.com/fravia/protec.htm

SHS instead of MD5?
http://www.secinf.net/firewalls_and_VPN/Firewalls_Complete/Firewalls_Complete__Cryptography_Is_it_Enough.html

..



pgsql-admin by date:

Previous
From: Bruno Wolff III
Date:
Subject: Re: brute force attacking the password
Next
From: Hans Peter Wiedau
Date:
Subject: Re: Destroying all exisitng tables in database